jackin-checkout-pr
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns were detected. The skill uses standard developer tools to perform common repository tasks and checks.
- [COMMAND_EXECUTION]: The skill executes
gh pr checkoutandgitcommands. These are consistent with the skill's purpose and include user confirmation steps for merged or closed pull requests. The skill also enforces a clean working tree before execution, which is a security best practice for repository management. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a standard attack surface for indirect instructions via pull request identifiers.
- Ingestion points: Input accepted via the
argument-hintinSKILL.md(PR number, URL, branch). - Boundary markers: None present; the skill treats the input as a direct argument for CLI tools.
- Capability inventory: Uses
ghCLI for checkout and repository metadata viewing. - Sanitization: Relies on the standard GitHub CLI (
gh) argument validation. This is considered safe and consistent with the skill's primary function.
Audit Metadata